Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa
File: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (raw, json)
Hash identifier: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=
Subject key identifier: 17:47:BE:2E:B3:9A:3B:57:C2:E5:DF:06:5D:0F:5B:11:E0:D9:D7:AD
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0194244577D5A383B1A143BF65ED001ECA25
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 2a10:5a80::/29 maxlen: 29
2a10:5c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:77:d5:a3:83:b1:a1:43:bf:65:ed:00:1e:ca:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1747be2eb39a3b57c2e5df065d0f5b11e0d9d7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:c6:3e:63:be:e2:91:52:d6:29:0e:69:b1:
17:f6:ec:6e:86:6e:3b:1a:41:a5:a8:cf:e0:66:79:
56:3e:04:b5:58:fa:0c:c3:db:98:8a:14:5f:5b:0b:
3b:89:f8:8d:88:09:73:f0:20:90:b7:1b:bb:0b:ac:
0e:59:28:53:f3:78:79:c4:0f:2c:0d:6d:9d:01:f4:
70:d8:47:68:23:c9:78:54:1a:8a:db:24:3d:c7:2b:
02:c4:6d:0b:9c:c9:3f:5c:e6:e6:c8:21:d3:63:1d:
00:66:0c:be:2e:41:08:81:ec:15:52:61:7b:34:07:
d2:2a:06:89:36:75:08:25:99:a1:4a:82:13:33:72:
5b:73:cd:56:c3:3a:1d:31:9e:a5:8c:2b:32:e8:04:
51:aa:ad:10:4c:26:32:1c:f2:52:29:ab:37:b5:8f:
4f:fd:7e:fd:6a:7a:58:bc:3a:dd:3a:55:16:c3:76:
bb:02:e9:47:b0:72:40:4c:5f:48:04:1d:c6:bb:df:
b5:d4:75:c3:1e:21:52:12:0c:48:36:21:9e:01:0a:
d6:4f:d4:1f:d6:0c:43:6b:78:a2:17:e9:ca:c7:27:
fb:c8:44:a7:9f:72:f3:89:f5:6a:26:c1:e2:7b:b7:
2f:0d:e7:9c:ba:66:5d:b1:ec:f1:16:38:bd:7e:27:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:BE:2E:B3:9A:3B:57:C2:E5:DF:06:5D:0F:5B:11:E0:D9:D7:AD
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:5a80::/29
2a10:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
81:f3:d6:49:ab:19:e8:a2:cc:4a:6a:1b:f9:ed:cf:63:ba:9d:
ed:6a:96:d2:49:f3:03:51:37:d8:2e:39:bb:7c:b5:72:72:61:
63:25:f0:33:fb:11:b7:47:62:c3:84:3b:98:a2:39:b1:79:e8:
cf:56:96:68:49:d9:9e:77:23:5e:d1:99:07:3d:8b:8d:80:18:
a2:c1:b2:b6:3e:73:2f:86:14:54:5e:48:57:cf:bd:35:f5:00:
4c:47:65:5c:28:6f:3f:60:ba:8c:70:fc:c2:74:3a:f2:c9:0a:
c9:9f:37:44:bc:5c:4b:76:e0:43:94:71:de:86:78:c7:37:79:
7b:f0:81:79:d9:6e:a3:55:0d:52:b4:75:d1:4e:bf:57:35:0e:
78:8a:3b:e1:49:fd:57:cf:26:a8:bf:a3:9e:df:0c:bf:97:e8:
b4:79:d0:95:01:04:2b:c6:76:d5:98:84:66:21:80:fb:68:f2:
a2:ae:f3:05:c4:96:69:12:74:3c:a2:a5:69:43:33:b8:82:46:
9b:93:95:b8:79:c4:0e:a7:19:4b:c3:05:c9:c0:9a:98:af:63:
4f:82:4f:58:0b:8d:8a:2b:f4:4e:09:d4:1c:30:c3:4f:d6:cf:
c3:10:53:58:e3:98:9b:5f:c3:dc:7d:fe:89:79:61:55:8b:83:
dd:a8:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:32 2025 by rpki-client